Blog Elements | SecurityOrb.com

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

Calling All Researchers: A Discussion on Building a Security Research Framework – Michael “@DrBearSec” Smith

2013-08-22/0 Comments/in Conference/by SecurityOrb_Staff

Independent researchers are lifeblood of the hacking community. Discovering new vulnerabilities, formulating new strategies and ideas, publishing white papers and blogs, and creating new tools, these visionaries help move our community and industry forward.

Google Releases Google Chrome 29.0.1547.57

2013-08-21/0 Comments/in Web Security/by SecurityOrb_Staff

Google has released Google Chrome 29.0.1547.57 for Windows, Mac, Linux, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities could allow a remote attacker to cause a denial of service condition, conduct a directory traversal attack, or obtain sensitive information.

Calling All Researchers: A Discussion on Building a Security Research Framework – Michael “@DrBearSec” Smith

2013-08-22/0 Comments/in Conference/by SecurityOrb_Staff

Google Releases Google Chrome 29.0.1547.57

2013-08-21/0 Comments/in Web Security/by SecurityOrb_Staff

Unfortunately, many outside of the community look down upon independent security researchers and dismiss their ideas and work. This can be for numerous reasons, such as the research not working for a specific organization or company, the lack of scientific and academic standards, or just a prejudice against the concept of independent research. Even worse, for our community, we have recently witnessed the prosecution of some of these researchers for crossing real or imaginary legal lines during the pursuit of their study.

One way to help legitimize the researchers to others in the corporate and academic communities, as well as help them avoid legal trouble, is the creation and adoption of research guidelines. The first half of the talk discusses some of the potential pitfalls and prejudices independent security researchers face, especially in regards to security disclosures. After that, there will be a frank discussion with audience members about their concerns and fears in terms of research, as well as what they would like to see in a research framework. Finally, volunteers will be invited to help create the framework.

BIO: Michael Smith is a senior security engineer and consultant for ePlus Security. A long time veteran of the industry, he has a diverse IT background, although his true passion remains security. Michael is currently a Doctoral candidate at Capital College, researching the usage of qualitative and quantitative intelligence in security analytics. He holds several certifications including his CISSP, OSCP, and GPEN. When not testing or securing the enterprise, Michael enjoys spending time with his family, pursuing his many geeky interests, wearing strange hats, and traveling especially to see the Mouse.

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

Calling All Researchers: A Discussion on Building a Security Research Framework – Michael “@DrBearSec” Smith

Google Releases Google Chrome 29.0.1547.57

Calling All Researchers: A Discussion on Building a Security Research Framework – Michael “@DrBearSec” Smith

Google Releases Google Chrome 29.0.1547.57

Full Sized Blog Element (Big Preview Pic)

Calling All Researchers: A Discussion on Building a Security Research Framework – Michael “@DrBearSec” Smith

Google Releases Google Chrome 29.0.1547.57

INTERESTING LINKS

Latest News

Business Hours